$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa File: 5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa (raw, json) Hash identifier: wBNYBRXT1ZqalZbdP5UxVqCXlA9Rn4l+VSct4EqwaNM= Subject key identifier: 96:47:E5:2B:34:53:E8:4D:DC:09:40:C2:5F:DB:48:C5:AF:32:A7:84 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584AD7D1250D35ECCEC4380A2110 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa Signing time: Wed 13 Aug 2025 13:00:41 +0000 ROA not before: Wed 13 Aug 2025 13:00:41 +0000 ROA not after: Tue 11 Nov 2025 14:00:41 +0000 asID: 1225 IP address blocks: 129.250.53.96/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d7:d1:25:0d:35:ec:ce:c4:38:0a:21:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 13 13:00:41 2025 GMT Not After : Nov 11 14:00:41 2025 GMT Subject: CN=647f7638-2dbc-42ae-b8a3-9a5fc8dc1cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:1f:1c:e8:68:5b:42:8c:d9:82:c8:b4:f7: 58:4b:76:d2:2c:81:56:fe:7c:f7:8c:3b:ae:51:ef: 0b:89:da:31:55:60:ef:98:6a:3b:34:d0:95:6e:56: 6d:b4:a7:c5:4a:43:8e:e5:d3:d8:6f:b3:2a:6a:20: 99:31:06:69:c0:64:27:f3:83:27:93:98:00:77:07: d5:76:87:3b:2e:30:12:29:25:02:24:f3:be:fe:e8: bc:b8:81:94:87:6a:61:e5:e0:57:b7:d9:ca:29:85: 13:02:44:f3:15:83:55:a6:dc:0b:df:55:ac:90:8e: 74:ff:8f:09:53:8d:4e:ca:1f:7a:1c:c1:a0:3d:ce: 90:2c:5d:60:cf:e4:8d:80:16:c8:fe:a9:14:39:f3: d0:19:d4:87:5d:42:22:3e:21:0a:ac:b5:13:dd:6b: 95:1c:e8:b1:51:6c:68:33:85:1f:a4:56:76:2c:c0: 2f:90:75:77:d0:e5:a1:9f:2b:2f:5f:a6:53:81:17: 9c:97:ce:18:19:4c:ca:b3:9a:58:3b:3b:b4:58:17: 95:c2:0c:0d:09:74:d1:2a:bb:f6:a4:f7:31:da:28: 6c:a2:b1:8d:be:43:94:9a:29:d6:05:4c:70:83:ce: 1d:25:99:37:f4:14:13:9d:ba:2f:9d:4d:b6:85:ad: 8a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:E5:2B:34:53:E8:4D:DC:09:40:C2:5F:DB:48:C5:AF:32:A7:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5f1fe15e-d9c1-3615-9c0e-2cbab64c2849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 129.250.53.96/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:2a:ac:19:2d:8f:35:3d:5e:0c:e0:b7:16:8e:e1:b0:0a:81: 05:c6:81:7c:4d:f6:5f:1d:70:73:9a:71:44:48:24:79:6a:ad: 5a:c2:6e:98:53:f2:0c:c8:75:98:ea:ac:88:da:91:c2:2e:ed: 5e:e6:35:6b:cb:d1:c6:db:fd:a5:ed:81:77:f7:ce:25:91:0f: 81:f2:5b:f2:5c:6b:09:fc:91:77:96:ed:6a:d8:1f:93:80:81: c2:42:a2:9b:8f:25:af:e2:f5:83:6b:95:cc:43:97:8e:db:19: b3:8b:8c:d2:29:52:cd:7e:eb:e6:e8:00:3a:64:40:84:18:ed: 58:1a:12:16:bf:38:39:ea:11:a7:6a:94:e6:96:01:db:7c:a7: 55:06:5b:17:8c:49:17:9f:15:bc:f6:d0:32:5f:f6:90:75:cb: 2a:d6:0a:18:0b:21:04:14:62:2b:93:37:dd:62:08:34:b3:f5: b3:ac:be:47:a2:e1:f2:c4:26:03:70:ee:56:4a:d5:f4:fd:9a: 62:8c:f7:e0:1f:f4:fd:69:31:fd:50:df:d7:7d:82:26:77:d3: 08:6e:2a:f3:83:18:22:b2:74:19:5a:d2:27:52:29:5e:c9:73: a6:e8:75:ad:10:7a:3a:45:69:bc:18:13:c8:cd:98:57:36:b2: a2:32:69:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErX0SUNNezOxDgKIRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk NjQ3Zjc2MzgtMmRiYy00MmFlLWI4YTMtOWE1ZmM4ZGMxY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMEfHOhoW0KM2YLItPdYS3bSLIFW/nz3jDuu Ue8LidoxVWDvmGo7NNCVblZttKfFSkOO5dPYb7MqaiCZMQZpwGQn84Mnk5gAdwfV doc7LjASKSUCJPO+/ui8uIGUh2ph5eBXt9nKKYUTAkTzFYNVptwL31WskI50/48J U41Oyh96HMGgPc6QLF1gz+SNgBbI/qkUOfPQGdSHXUIiPiEKrLUT3WuVHOixUWxo M4UfpFZ2LMAvkHV30OWhnysvX6ZTgRecl84YGUzKs5pYOzu0WBeVwgwNCXTRKrv2 pPcx2ihsorGNvkOUminWBUxwg84dJZk39BQTnbovnU22ha2KdQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJZH5Ss0U+hN3AlAwl/bSMWvMqeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNWYxZmUxNWUtZDljMS0z NjE1LTljMGUtMmNiYWI2NGMyODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEgfo1YDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDHKqwZLY81PV4M4LcWjuGwCoEFxoF8TfZfHXBzmnFESCR5aq1awm6Y U/IMyHWY6qyI2pHCLu1e5jVry9HG2/2l7YF3984lkQ+B8lvyXGsJ/JF3lu1q2B+T gIHCQqKbjyWv4vWDa5XMQ5eO2xmzi4zSKVLNfuvm6AA6ZECEGO1YGhIWvzg56hGn apTmlgHbfKdVBlsXjEkXnxW89tAyX/aQdcsq1goYCyEEFGIrkzfdYgg0s/WzrL5H ouHyxCYDcO5WStX0/ZpijPfgH/T9aTH9UN/XfYImd9MIbirzgxgisnQZWtInUile yXOm6HWtEHo6RWm8GBPIzZhXNrKiMmkj -----END CERTIFICATE-----Generated at Sat Aug 23 16:57:16 2025 by rpki-client